| Package | Affected versions | Patched versions |
|---|---|---|
| java software development kit | ≥ 7.1.0.0, < 7.1.5.22≥ 8.0.0.0, < 8.0.8.25 | 7.1.5.228.0.8.25 |
The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free